Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.mft
File: yIYjh23RrY5iSiPdUossZMgKhSE.mft (raw, json)
Hash identifier: +eOWGcFEZMbinki9Jw9paIcPxpLXOr1vikKRVExsqfc=
Subject key identifier: 63:F5:82:8E:B0:C0:E8:E4:1A:6E:DB:38:BF:94:CF:64:D9:DE:1F:19
Authority key identifier: C8:86:23:87:6D:D1:AD:8E:62:4A:23:DD:52:8B:2C:64:C8:0A:85:21
Certificate issuer: /CN=c88623876dd1ad8e624a23dd528b2c64c80a8521
Certificate serial: 019FA0DFD8211A5EE4FF2C41C99FAAB72D91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yIYjh23RrY5iSiPdUossZMgKhSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.mft
Manifest number: 08F0
Signing time: Mon 27 Jul 2026 00:00:52 +0000
Manifest this update: Mon 27 Jul 2026 00:00:52 +0000
Manifest next update: Tue 28 Jul 2026 00:00:52 +0000
Files and hashes: 1: h1IcZRGY_rRXRhpZWTLbtpzh9tM.roa (hash: L8O1+G2QnBwVNFEY7LCl7zf6sGt3HNSfVfaE38wa8Uo=)
2: yIYjh23RrY5iSiPdUossZMgKhSE.crl (hash: OaUWSbarDU/SXmqR61p2PNzo6ka0C+Fl/DcQEe/HD7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yIYjh23RrY5iSiPdUossZMgKhSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 00:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:d8:21:1a:5e:e4:ff:2c:41:c9:9f:aa:b7:2d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c88623876dd1ad8e624a23dd528b2c64c80a8521
Validity
Not Before: Jul 27 00:00:52 2026 GMT
Not After : Jul 28 00:00:52 2026 GMT
Subject: CN=63f5828eb0c0e8e41a6edb38bf94cf64d9de1f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:48:51:af:1e:5d:c4:75:ba:2f:98:de:05:f8:
dc:cf:5a:d2:92:9f:3a:71:8d:4f:2c:4e:f7:15:a4:
a1:29:1e:55:89:ec:4a:7f:b3:4a:d3:df:3b:83:af:
de:fc:74:30:c7:ea:43:ff:44:42:b2:ff:ed:7d:f8:
8c:0d:90:4b:a3:7d:02:52:6d:67:f5:c8:84:83:96:
93:19:9e:eb:c4:bd:f4:cd:dd:d5:f3:0d:83:19:26:
2b:df:da:c7:ca:db:2f:3b:6c:00:ae:4b:d0:c1:d1:
36:6b:64:49:05:e5:70:f3:05:8d:c1:b1:4f:95:a2:
b0:d6:70:92:a5:14:c2:ca:1e:99:e4:40:22:0b:6d:
32:7d:98:04:4b:45:53:f4:bf:20:81:62:73:c2:35:
0c:77:3d:21:41:2a:0f:bb:22:bb:9a:9c:b5:34:eb:
20:50:db:3e:be:44:db:a4:73:c3:87:e9:94:89:72:
01:dd:ec:d9:18:cd:f6:58:ce:c0:85:95:96:8d:41:
b2:62:77:79:87:d6:49:1f:01:ee:27:c1:1d:f5:c1:
68:3f:96:18:fd:b6:53:9d:2c:7c:d7:b7:43:a0:24:
5e:de:a9:a7:a7:78:4d:b9:e7:21:f6:16:dd:32:52:
de:e7:bd:5d:1b:26:a6:6d:34:f4:d4:a4:b2:8e:f0:
64:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F5:82:8E:B0:C0:E8:E4:1A:6E:DB:38:BF:94:CF:64:D9:DE:1F:19
X509v3 Authority Key Identifier:
keyid:C8:86:23:87:6D:D1:AD:8E:62:4A:23:DD:52:8B:2C:64:C8:0A:85:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yIYjh23RrY5iSiPdUossZMgKhSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:00:1e:4e:56:59:4c:76:94:7d:cf:78:b5:c3:91:58:0d:bd:
af:06:73:64:98:dd:96:35:03:20:38:ff:fd:9b:4f:21:da:ce:
7a:39:ae:07:f4:f2:8c:94:ba:86:27:ea:14:ac:62:aa:dd:62:
b3:6a:f3:7f:7d:bf:5f:82:1c:f2:c4:f3:78:56:0f:7d:1b:fd:
3b:29:cd:1b:67:90:a3:52:48:14:bc:85:01:42:3a:f8:e9:07:
cf:cf:bb:10:bc:a6:4b:06:9f:e5:3f:2a:f2:cf:a7:70:dd:d6:
c5:60:a0:21:2a:5f:4e:b0:27:9a:b1:91:33:2b:2f:ef:83:43:
83:d2:d3:93:c4:67:1a:18:fe:3e:56:23:fa:e8:4b:32:9f:b0:
08:f9:49:0e:0e:7a:51:a9:34:43:0c:01:1b:4b:a1:f2:4a:de:
b1:81:e0:04:5c:c9:b6:7f:02:bb:82:bf:97:24:1d:53:2c:86:
4d:cc:f9:a5:64:b7:d9:ac:b3:e5:a2:08:3b:6e:83:0b:e0:fb:
ad:32:e3:85:25:11:c3:ac:aa:12:1f:1e:f7:8f:df:34:54:5e:
5c:9d:d5:c5:82:c2:18:47:d3:68:66:24:0c:c1:74:f4:c8:10:
7d:7f:7f:6e:c5:99:73:03:62:6b:a0:91:38:de:51:b3:a1:33:
34:6a:b8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:23:21 2026 by rpki-client